Skip to content

v0.4.2 - pySigma, Backend, and Langchain version updates!
Compare
Choose a tag to compare
@slincoln-aiq slincoln-aiq released this 10 Oct 21:34
· 21 commits to master since this release
v0.4.2
b4c7c05
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

SigmAIQ v0.4.2 Release Notes

🚀 Major Updates

Dependency Upgrades

  • Upgraded to Python 3.9+ support (previously 3.8.1+)
  • Updated numerous core dependencies to latest versions, including:
    • pysigma (0.11.14)
    • pysigma backends and pipelines
    • langchain (0.2.16)
    • openai

New Backends

  • Added Kusto backend support:
    • Microsoft Defender XDR
    • Microsoft Sentinel ASIM
    • Azure Monitor
  • Added Netwitness backend

Enhanced Crowdstrike Support

  • Added Crowdstrike Logscale backend
  • Updated Crowdstrike Splunk backend to use FDR pipeline

🔧 Improvements & Changes

Backend Refinements

  • Removed deprecated Microsoft365Defender backend
  • Updated Elasticsearch backend to support additional pipelines:
    • ecs_kubernetes
    • ecs_windows_old
    • ecs_zeek_beats
    • ecs_zeek_corelight
    • zeek_raw

LLM Module Enhancements

  • Expanded README with detailed feature descriptions and usage guidelines
  • Default LLM model changed to gpt-4o

🐛 Bug Fixes

  • Various minor bug fixes and code improvements

📚 Documentation

  • Updated installation instructions and requirements
  • Enhanced LLM module documentation with examples and known issues

🛠 Development Tools

  • Updated development dependencies (pytest, black, ruff)
  • Refined project configuration (pyproject.toml, ruff settings)

This release significantly enhances SigmAIQ's capabilities, especially in backend support and LLM integration. Users are encouraged to review the updated documentation for new features and potential breaking changes due to dependency updates.

Assets 2
Loading